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ABSTRACT 



In a calling facsimile, if an operator sets an encryption 
communication mode, a random number sequence is gen- 
erated by a random number generating section 15. A control 
section 11 produces an encryption key from the random 
number sequence, and transmits the random number 
sequence used for producing the encryption key to a tele- 
phone line 3 with the random number sequence included in 
NSS which is an option signal. At the same time, an 
encryption/decryption processing section 16 subjects infor- 
mation to be transmitted to encryption processing on the 
basis of the encryption key. The encrypted information is 
transmitted to the telephone line 3. On the other hand, in a 
called facsimile, the encryption key is reproduced on the 
basis of the random number sequence included in the NSS, 
and the received information is decrypted on the basis of the 
reproduced encryption key, Accordingly, the encryption key 
need not be determined in advance between a transmitter 
and a receiver. Further, the encryption key does not leak 
during transmission, thereby protecting the security of com- 
munication. 

12 Claims, 6 Drawing Sheets 
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ENCRYPTION COMMUNICATION METHOD 
AND TERMINAL DEVICE FOR 
ENCRYPTION COMMUNICATION 



BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to an encryption communi- 
cation method applied when encryption communication is 10 
established between a calling terminal device and a called 
terminal device, and to a tenninal device for carrying out the 
encryption communication method. 

2. Description of the Prior Art 
In the field of communication, communication data has 

been conventionally subjected to encryption processing 
from the point of view of security protection of the com- 
munication data. For example, in facsimile communication 
for transmitting and receiving information corresponding to 
a document, the information which is communication data 
has been subjected to encryption processing so as to protect 
the security of the information. 

The encryption processing of the information is per- 
formed on die basis of a so-called encryption key. Specifi- 
cally, the information is subjected to a predetermined logical 
operation using the encryption key, thereby producing 
encrypted information entirely different from the original 
information. On the other hand, decryption processing for 
restoring the encrypted information into the original infor- 
mation is achieved by subjecting the encrypted information 
to a predetermined logical operation using the encryption 
key. The logical operation for the decryption processing is 
an operation opposite to the logical operation for the encryp- 
tion processing. 

The encryption processing and the decryption processing 
thus require a common encryption key. Therefore, a method 
in which an encryption key is previously determined 
between the transmission side and the receiving side of the 
encryption communication and the determined encryption 40 
key is previously registered in nonvolatile memories respec- 
tively provided in a terminal device on the transmission side 
and a terminal device on the receiving side has been con- 
ventionally adopted. 

In the above described method, however, preparation 45 
work for establishing encryption communication is compli- 
cated because the encryption key must be determined in 
advance and registered in the nonvolatile memories. 

Furthermore, when the encryption key stored in the non- 
volatile memories disappears or is known by a third person so 
for some reason, the above described preparation work must 
be performed again. 

In order to solve the above described problems, therefore, 
it is considered that the encryption key itself is transmitted. 
In a case where the encryption key itself is transmitted, 
however, the danger of leakage of the contents of the 
communication to the third person is increased if the encryp- 
tion key is monitored on the communication line. 



J5 



20 



25 



30 



35 



55 



60 



Another object of the present invention is to provide a 
terminal device for carrying out the above described encryp- 
tion communication method. 

In accordance with an aspect, a calling tenninal device 
according to the present invention comprises a random 
number generating section for generating a random number 
sequence, an encryption key producing section for produc- 
ing an encryption key on the basis of the random number 
sequence generated by the random number generating sec- 
tion, an encrypting section for subjecting information to be 
transmitted to encryption processing on the basis of the 
encryption key produced by the encryption key producing 
section, and a transmitting section for transmitting to a 
communication line control information including the ran- 
dom number sequence used in producing the encryption key 
and the information subjected to the encryption processing 
by the encrypting section. 

On the other hand, in accordance with an aspect, a called 
terminal device according to the present invention comprises 
an encryption key reproducing section for reproducing the 
encryption key on the basis of the random number sequence 
included in the control information transmitted from the 
calling terminal device through the communication line, and 
a decrypting section for subjecting the information received 
from the calling tenninal device through the communication 
line to decryption processing on the basis of the encryption 
key reproduced by the encryption key reproducing section to 
restore the original information before the encryption. 

According to the present invention, in the calling terminal 
device, the encryption key is produced on the basis of the 
random number sequence generated by the random number 
generating section, and the information to be transmitted is 
subjected to the encryption processing on the basis of the 
produced encryption key. The control information, including 
the random number sequence used in producing the encryp- 
tion key, and the information subjected to the encryption 
processing are transmitted to the communication line. On 
the other hand, in the called terminal device, the encryption 
key is reproduced on the basis of the random number 
sequence included in the received control information. The 
received information is subjected to the decryption process- 
ing on the basis of the reproduced encryption key, to restore 
the decrypted original information. 

Since the encryption key used in the case of the encryp- 
tion in the calling tenninal device is thus reproduced in the 
called terminal device, it is not necessary to previously 
determine the encryption key between a transmitter and a 
receiver and register the determined encryption key in 
nonvolatile memories. Accordingly, preparation work for 
encryption communication can be simplified. 

Since the encryption key is produced on the basis of the 
random number sequence, the encryption key differs for 
each communication. Further, since not the encryption key 
itself, but the random number sequence used for producing 
the encryption key, is transmitted, the encryption key is not 
easily known by a third person. Accordingly, the security of 
communication can be kept high. 

The foregoing and other objects, features, aspects and 
advantages of the present invention will become more 
apparent from the following detailed description of the 
present invention when taken in conjunction with the 
accompanying drawings. 



SUMMARY OF THE INVENTION 



An object of the present invention is to solve the above 
described technical problems and provide an encryption 
communication method requiring no complicated prepara- 65 
tion work and ensuring the security of the contents of the 
communication. 



BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a conceptual diagram showing one example of 
an encryption communication system to which one embodi- 
ment of the present invention is applied; 
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FIG. 2 is a block diagram showing the electrical construc- 
tion of a facsimile applied to the encryption communication 
system shown in FIG. 1; 

FIG. 3 is a flow chart showing operations of a calling 
facsimile in accordance with the present invention; 5 

FIGS. 4 (a), 4 (b) and 4 (c) are diagrams for explaining a 
method of producing an encryption in accordance with the 
present invention; 

FIG. 5 is a flow chart showing operation of a called 1Q 
facsimile in accordance with the present invention. 

FIG. 6 is a signal sequence showing transmission and 
receiving of signals between the calling facsimile and the 
called facsimile in accordance to the present invention. 

15 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

FIG. 1 is a conceptual diagram showing one example of 
an encryption communication system to which one embodi- 20 
ment of the present invention is applied. The encryption 
communication system comprises a calling facsimile 1 for 
subjecting information corresponding to a document to be 
transmitted to encryption processing and transmitting the 
same and a called facsimile 2 for receiving the information 25 
encrypted and transmitted from the calling facsimile 1 and 
subjecting the same to decryption processing. The facsimiles 
1 and 2 are connected to each other through a telephone line 
3. 

FIG. 2 is a block diagram showing the electrical construe- 30 
tion of the above described facsimile. The facsimile is 
applied to both of the calling facsimile 1 and the called 
facsimile 2. The facsimile 1 comprises a control section 11 
connected to the telephone line 3 through a network control 
unit (NCU) 10, a scanner section 12 for reading a document 35 
to be transmitted, and a printer section 13 for recording on 
paper information received through the telephone line 3. An 
operating section 14 capable of inputting various control 
information, a random number generating section 15 for 
generating a random number sequence, an encryption/de- 
cryption processing section 16 and a modem 17 are con- 
nected to the control section 11. The encryption/decryption 
processing section 16 encrypts the information to be trans- 
mitted and received encrypts the encrypted information to 
restore the original information. 

The scanner section 12 includes an image sensor (not 
shown) for optically reading a document to generate infor- 
mation. The image sensor electrically scans the document in 
a predetermined direction of horizontal scanning. The docu- ^ 
ment is conveyed in the direction of vertical scanning 
crossing the direction of horizontal scanning, thereby to 
achieve vertical scanning. The information outputted from 
the scanner section 12 is subjected to binary-coding pro- 
cessing and compression coding processing, after which the 
information is inputted to the control section 11. 

The operating section 14 includes a start key, numerical 
keys, a mode setting key and the like. The mode setting key 
is a key for setting an operation mode of the facsimile. 
Examples of the operation mode include a normal mode for ^ 
establishing normal facsimile communication and an 
encryption communication mode for establishing encryption 
communication. 

FIG. 3 is a flow chart showing operations of the calling 
facsimile 1. An operator sets a document to be transmitted 65 
in the scanner section 12 and operates the operating section 
4 to set an operation mode (step SI). In the case of 
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encryption communication, the operation mode is set to an 
encryption communication mode. The operator then oper- 
ates the start key to start transmission. In response thereto, 
the control section 11 instructs the random number gener- 
ating section 15 to generate a random number sequence (step 

52) . The random number sequence generated by the random 
number generating section 15 is applied to the control 
section 11. In the control section U, an encryption key is 
produced on the basis of the random number sequence (step 

53) . The details of the production of the encryption key will 
be described later. 

Furthermore, the control section 11 calls the called fac- 
simile 2 in response to the start of transmission. If the called 
facsimile 2 answers, NSF (Non-Standard Facilities), which 
is a non-standard facilities identification signal including a 
code indicating that the called facsimile has an encryption 
communication function, is transmitted to the control sec- 
tion 11 of the calling facsimile 1 from the called facsimile 2. 
The control section 11 recognizes, if it receives the NSF, that 
the called facsimile 2 has an encryption communication 
function, and transmits to the telephone line 3 various 
control signals including NSS (Non-Standard Facilities Set- 
up) which is a non-standard facilities set-up signal (step 4). 

In the calling facsimile 1, the document is sequentially 
read page by page by the scanner section 12 at approxi- 
mately the same time that the above described NSS is 
transmitted (step S5). If document information correspond- 
ing to one page is read, the information is applied to the 
encryption/decryption processing section 16. In the encryp- 
tion/decryption processing section 16, the information is 
subjected to encryption processing, using the encryption key 
produced in the control section 11, to produce encrypted 
information (step S6). The encrypted information is applied 
to the control section 11. The control section 11 transmits the 
applied encrypted information to the telephone line 3 
through the NCU 10 (step S7). 

The NSS which is transmitted prior to the transmission of 
the encrypted information includes information representing 
an encryption communication mode and the random number 
sequence used for producing the encryption key. The called 
facsimile 2 reproduces the encryption key on the basis of the 
random number sequence included in the NSS and decrypts 
the encrypted information on the basis of the reproduced 
encryption key. 

FIGS. 4 (a), 4 (b) and 4 (c) are diagrams for explaining a 
method of producing an encryption key. A random number 
sequence including binary data composed of predetermined 
R bits (for example, R =80) is generated by the random 
number generating section 15 (see FIG, 4 (a). In the control 
section 11, a binary data sequence corresponding to n bits 
(for example, n=4) from the m-th bit (for example, m=10), 
counted from the first bit in the random number sequence is 
taken out (see FIG. 4 (6). Here, m and n are predetermined 
constants. An ordinal number representation of the value 
represented by the binary data sequence taken out becomes 
a position "W" representing the position where an encryp- 
tion key exists. A binary data sequence corresponding to 
predetermined K bits (for example, K=64) from the 4 W-th 
bit, counted from the first bit in the random number 
sequence is taken out (see FIG. 4 (c). The binary data 
sequence taken out becomes an encryption key. 

For example, if the binary data sequence taken out of the 
random number sequence as the position "W" is "1101", the 
position "W" becomes "13" in decimal representation. At 
this time, 64 bits from the 13-th bit to the 76-th bit becomes 
the encryption key. 
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The position "W" is thus determined on the basis of the 
random number sequence, and the encryption key is further 
produced on the basis of the position * W\ Since the random 
number sequence takes a different value for each encryption 
communication, the encryption key and the position thereof 
in the random number sequence differ for each encryption 
communication. 

In a case where the position "W" is composed of n bits, 
if the position "W" takes the maximum value "111 . . . 
l"(=2 n -l), the encryption key becomes a binary data 
sequence from the <2 n -l)-th bit to the (2"+K-2) (=(2"-l)+ 
(K-l))-th bit in the random number sequence. Conse- 
quently, the following relationship must be satisfied so as to 
reliably produce an encryption key composed of K bits: 

If the number of bits composing the random number 
sequence generated by the random number generating sec-, 
tion 15 is set larger, it is possible to make the position where 
the encryption key exists more difficult to determine. 

FIG. 5 is a flow chart showing operation of the called 
facsimile 2. If the line is connected, the NSF is transmitted 
to the calling facsimile 1 (step PI). If the NSS is then 
received from the calling facsimile 1 (step P2), it is recog- 
nized that an encryption communication mode is set. When 
the encryption communication mode is set, the control 
section 11 reproduces an encryption key included in the NSS 
(step P3). Specifically, the control section 11 extracts as a 
position "W" a binary data sequence corresponding to n bits 
from the m-th bit, counted from the first bit in the random 
number sequence included in the NSS. A binary data 
sequence corresponding to K bits commencing with the 1 W 
-th bit, counted from the first bit in the random number 
sequence, is taken out as the encryption key. Consequently, 
the encryption key can be reproduced. The reproduced 
encryption key is applied to the encryption/decryption pro- 
cessing section 16. 

The control section 11 applies, if it receives the encrypted 
information from the calling facsimile 1 (step.P4), the 
encrypted information to the encryption/decryption process- 
ing section 16. In the encryption/decryption processing 
section 16, the encrypted information is decrypted on the 
basis of the above described reproduced encryption key 
(step P5), to restore the original information. Thereafter, the 
document image received is recorded on paper on the basis 
of control carried out by the control section 11. 

FIG. 6 is a signal sequence showing transmission and 
receiving of signals between the calling facsimile 1 and the 
called facsimile 2. 

If the line is connected, CNG (Calling Tone) indicating 
that a calling facsimile is a voiceless terminal is transmitted 
from the calling facsimile 1. CED (Calling Station Identi- 
fication) is transmitted in response to the CNG from the 
called facsimile 2, and DIS (Digital Identification Signal), 
including a code indicating that a called facsimile has a 
standard function, and NSF are further transmitted. The NSF 
is an option signal whose contents can be freely set by a 
maker of a facsimile. In the present embodiment, the NSF 
includes a code indicating that a called facsimile has an 
encryption communication function. 

The calling facsimile 1 which received the DIS and the 
NSF, enabling it to recognize that the called facsimile 2 has 
an encryption communication function, transmits NSS. The 
NSS is also an option signal, similarly to the above 
described NSF. In the present embodiment, the NSS 
includes an identification code indicating whether or not an 
encryption communication mode is set in the calling fac- 
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simile 1 and the random number sequence used in producing 
the encryption key, as described above. 

The called facsimile 2 transmits, if it is ready for receiv- 
ing, CFR (Confirmation to Receive). The calling facsimile 1 
which received the CFR transmits the encrypted informa- 
tion, and transmits EOP (End of Procedures), indicating that 
transmission is terminated, when it has transmitted all the 
encrypted information. MCF (Message Confirmation) indi- 
cating that receiving is confirmed is transmitted from the 
called facsimile 2 which received the EOP. DCN (Discon- 
nect) indicating that a line is disconnected is transmitted 
from the calling facsimile 1 which received the MCF, to 
disconnect the line. 

As described in the foregoing, in the facsimile according 
to the present embodiment, the random number sequence 
used for producing the encryption key is transmitted, 
whereby the encryption key need not be determined in 
advance and previously registered in nonvolatile memories. 
Consequently, preparation work for encryption communica- 
tion is significantly decreased. Since the encryption key is 
produced on the basis of the random number sequence, the 
encryption key differs for each communication, and the 
position where the encryption key exists in the random 
number sequence differs for each communication. Conse-, 
quently, it is extremely difficult for a third person to monitor 
the encryption key. Therefore, it is possible to ensure the 
security of the contents of communication. 

Furthermore, in the present embodiment, the encryption 
key is included in the NSS which is an option signal. The 
type and the contents of the option signal are usually not' 
available to the public. According to the present embodi- 
ment, therefore, it is possible to prevent the encryption key 
from leaking particularly effectively. 

Although a description has been made of the present 
invention, the present invention is not limited to the above 
described embodiment For example, in the present embodi- 
ment, the constants m and n required to determine the 
position "W 1 * and the constant K required to determine the 
encryption key are predetermined. However, the constants n, 
m and K may be varied for each communication. In this 
case, however, the constants n, m and K, along with the 
random number sequence, must be transmitted to the called 
facsimile 2 so that the called facsimile 2 can recognize the 
position "W" to reproduce the encryption key. 

Although in the above described embodiment, description 
was made by taking the facsimile as a terminal device, the 
present invention is also applicable to other terminal devices 
such as a personal computer and a word processor. Further, 
the present invention is also widely applicable to various 
terminal devices capable of establishing encryption commu- 
nication. 

Furthermore, the present invention is also applicable to a 
case where information other than the information taken as 
an example of information to be transmitted in the above 
described embodiment is transmitted. 

Additionally, although in the above described embodi- 
ment, a part of the random number sequence is an encryption 
key, an encryption key may be produced/reproduced by 
subjecting a part of a random number sequence to a prede- 
termined logical operation, for example. Specifically, the 
encryption key itself need not constitute a part of a random 
number sequence. 

Although the present invention has been described and 
illustrated in detail, it is clearly understood that the same is 
by way of illustration and example only and is not to be 
taken by way of limitation, the spirit and scope of the present 
invention being limited only by the terms of the appended 
claims. 
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What is claimed is: 

1. An encryption communication method for transmitting 
encrypted information from a calling terminal device to a 
called terminal device through a communication line, said 
method comprising the steps of: 5 

(a) generating at the calling terminal device a random 
number sequence; 

(b) producing at the calling terminal device an encryption 
key on the basis of the generated random number 
sequence; 10 

(c) subjecting information to be transmitted by the calling 
terminal device to encryption processing on the basis of 
the produced encryption key; 

(d) transmitting the encrypted information and control 
information from the calling terminal device, via the 15 
communication line, to the called terminal device, the 
control information including the random number 
sequence used in producing the encryption key; 

(e) receiving the encrypted information and the control 
information at the called terminal device; 20 

(f) reproducing at the called terminal device the encryp- 
tion key on the basis of the random number sequence 
included in the received control information; and 

(g) decrypting the received encrypted information on the 
basis of the reproduced encryption key; 25 

wherein step (b) comprises: 

defining as a position key a binary data sequence 
corresponding to n bits of the generated random 
number sequence, commencing with the m-th bit 
counted from the first bit in the generated random 30 
number sequence; and 

defining as the encryption key a binary data sequence 
having a length of K bits and commencing with a bit 
at a bit position corresponding to an ordinal number 
representation of the position key, counted from the 35 
first bit in the generated random number sequence, 
where m, n, and K are integers. 

2. The encryption communication method according to 
claim 1, wherein m, n and K are predetermined values. 

3. The encryption communication method according to ^ 
claim 1, wherein m, n and K are arbitrary values which vary 
for each transmission. 

4. The encryption communication method according to 
claim 1, wherein the random number sequence includes R 
bits, where R is an integer, and 2 n +K-2^R. 

5. An encryption communication method for transmitting 45 
encrypted information from a calling terminal device to a 
called terminal device through a communication line, said 
method comprising the steps of: 

(a) generating at the calling terminal device a random 
number sequence; 50 

(b) producing at the calling terminal device an encryption 
key on the basis of the generated random number 
sequence; 

(c) subjecting information to be transmitted by the calling 
terminal device to encryption processing on the basis of 55 
the produced encryption key; 

(d) transmitting the encrypted information and control 
information from the calling terminal device, via the 
communication line, to the called terminal device, the 
control information including the random number 
sequence used in producing the encryption key; 

(e) receiving the encrypted information and the control 
information at the called terminal device; 

(f) reproducing at the called terminal device the encryp- 65 
tion key on the basis of the random number sequence 
included in the received control information; and 
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(g) decrypting the received encrypted information on the 

basis of the reproduced encryption key; 
wherein step (b) comprises: 
defining a position key composed of n bits from the 

random number sequence, and 
defining as the encryption key a binary data sequence 
having a length of K bits and commencing with a bit 
at a bit position corresponding to an ordinal number 
representation of the position key, counted from the 
first bit in the general random number sequence, 
where n and K are integers. 

6. The encryption communication method according to 
claim 5, wherein n and K are predetermined values. 

7. The encryption communication method according to 
claim 5, wherein n and K are arbitrary values which vary for 
each transmission. 

8. The encryption communication method according to 
claim 5, wherein the random number sequence includes R 
bits, where R is an integer, and 2 n +K-2SR. 

9. A terminal device for transmitting encrypted informa- 
tion to a called terminal device connected thereto through a 
communication line, comprising: 

random number generating means for generating a ran- 
dom number sequence; 
encryption key producing means for producing an encryp- 
tion key on the basis of the generated random number, 
encrypting means for subjecting information to be trans- 
mitted to encryption processing on the basis of the 
produced encryption key; 
transmitting means for transmitting the encrypted infor- 
mation and control information via the communication 
line to the called tenninal device, the control informa- 
tion including the random number sequence used in 
producing the encryption key; 
wherein said encryption key producing means comprises: 
means for designating as a position key a binary data 
sequence corresponding to n bits of the generated 
random number sequence, commencing with the 
m-th bit counted from the first bit in the generated 
random number sequence and 
means for specifying as the encryption key a binary 
data sequence having a length of K bits and com- 
mencing with a bit at a bit position corresponding to 
an ordinal number representation of the position key, 
counted from the first bit in the generated random 
number sequence, where m, n and K are integers. 

10. A terminal device for transmitting encrypted informa- 
tion to a called terminal device connected thereto through a 
communication line, comprising: 

random number generating means for generating a ran- 
dom number sequence; 

encryption key producing means for producing an encryp- 
tion key on the basis of the generated random number; 

encrypting means for subjecting information to be trans- 
mitted to encryption processing on the basis of the 
produced encryption key; 

transmitting means for transmitting the encrypted infor- 
mation and control information via the communication 
line to the called tenninal device, the control informa- 
tion including the random number sequence used in 
producing the encryption key; 

wherein said encryption key producing means comprises: 
means for designating a position key composed of n 
bits in the generated random number sequence; and 
means for specifying as the encryption key a binary 
data sequence having a length of K bits and com- 



07/27/2004, EAST Version: 1.4.1 



5,574,789 



10 



raencing with a bit at a bit position corresponding to 
an ordinal-number representation of the position key, 
counted from the first bit in the generated random 
number sequence, where n and K are integers. 
11. A terminal device for receiving from a calling terminal 
device connected thereto through a communication line 
information encrypted on the basis of an encryption key, 
produced using a random number sequence, and control 
information including the random number sequence, com- 
prising: 

encryption key reproducing means for reproducing the 
encryption key on the basis of a random number 
sequence included in control information received from 
the calling terminal device, and 

decrypting means for subjecting encrypted information 
received from the calling terminal device with the 
received control information to decryption processing 
on the basis of the reproduced encryption key to restore 
original information before the encryption; 

wherein said encryption key reproducing means com- 
prises: 

means for extracting as a position key a binary data 
sequence corresponding to n bits of the received 
random number sequence commencing with the 
m-th bit counted from the first bit in the received 
random number sequence; and 

means for specifying as the encryption key a binary 
data sequence having a length of K bits and com- 
mencing with a bit at a bit position corresponding to 
an ordinal number representation of the position key, 
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counted from the first bit in the received random 
number sequence, wherein m, n and K are integers. 
12. A terminal device for receiving from a calling terminal 
device connected thereto through a communication line 
information encrypted on the basis of an encryption key, 
produced using a random number sequence, and control 
information including the random number sequence, com- 
prising: 

encryption key reproducing means for reproducing the 
encryption key on the basis of a random number 
sequence included in control information received from 
the calling terminal device, and 

decrypting means for subjecting encrypted information 
received from the calling terminal device with the 
received control information to decryption processing 
on the basis of the reproduced encryption key to restore 
original information before the encryption; 

wherein said encryption key reproducing means com- 
prises: . 

means for extracting a position key composed of n bits 
in the received random number sequence; and 

means for specifying as the encryption key a binary 
data sequence having a length of K bits and com- 
mencing with a bit at a bit position corresponding to 
an ordinal number representation of the position key, 
counted from the first bit in the received random 
number sequence, wherein n and K are integers. 
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